Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: VxTrMDHuFJuJYFj27oFMBnBuf3foceq0kRJjSNgkDWk=
Subject key identifier: E7:34:F2:C6:F9:0D:F2:28:E0:B5:DF:8F:5D:6C:EE:06:B2:84:3A:06
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 0197B88F380CCBAE1AD70F8905A49EA12717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:01:22 +0000
Manifest this update: Sat 28 Jun 2025 22:01:22 +0000
Manifest next update: Sun 29 Jun 2025 22:01:22 +0000
Files and hashes: 1: HSzy_sdTpMM9eJp_2_sbD1IEYy0.roa (hash: ieQeEh5XwIx3cGbKm9ddEXjqNduJq3qUmYGe9bdZpCY=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: LrPgxFkut+VZv8OjAfOxQvV8Qab0b2Vhh+v5pZCz7iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:38:0c:cb:ae:1a:d7:0f:89:05:a4:9e:a1:27:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Jun 28 22:01:22 2025 GMT
Not After : Jun 29 22:01:22 2025 GMT
Subject: CN=e734f2c6f90df228e0b5df8f5d6cee06b2843a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:6b:bc:9a:a4:45:22:ea:1c:6a:f5:7d:2d:
07:a4:28:27:93:11:27:ba:16:e3:06:18:e5:7e:4b:
8f:b6:0c:c6:2e:81:43:2a:e5:b0:2f:0b:56:bc:1a:
1c:08:67:a0:41:ae:cb:10:c2:6a:94:73:84:80:ab:
00:d7:59:bd:d0:c6:d4:21:73:94:e1:31:e8:8d:3b:
cb:d6:5c:9d:fb:a8:86:21:7d:5f:35:33:ae:86:46:
39:50:4f:68:cd:03:41:48:59:61:ef:6b:77:3b:70:
1c:32:fb:dd:d1:21:90:33:0c:eb:05:25:85:6d:37:
f6:72:3e:c9:11:36:a5:c1:8e:93:f4:53:1b:92:00:
5f:bc:97:c2:ab:c7:c0:70:61:ec:fb:93:3f:3d:0a:
34:83:4c:81:d0:21:79:80:28:6d:ea:61:79:2c:97:
04:36:1e:3c:80:d9:05:ab:c2:75:02:30:d8:ee:bc:
03:40:fa:ad:d9:3f:a8:7c:a6:de:a2:53:bd:ac:39:
69:be:e4:7c:af:08:b2:f8:ea:2f:57:ff:7a:c6:6c:
c2:1d:1d:af:35:76:48:9a:fc:25:c9:ad:cc:a6:ef:
3f:19:08:47:82:ad:f8:c9:b7:98:ac:3e:bb:ad:32:
bc:f1:56:7c:0f:1a:43:5f:df:5c:11:f4:1b:74:a9:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:34:F2:C6:F9:0D:F2:28:E0:B5:DF:8F:5D:6C:EE:06:B2:84:3A:06
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d7:68:bf:1c:26:86:93:51:e1:ac:61:73:92:bc:90:01:0f:
a7:7a:8a:47:5c:62:38:40:08:23:18:bf:01:6e:e6:3c:7d:21:
de:9c:96:71:30:7a:fb:54:32:bd:38:43:43:26:ab:4c:d5:8f:
58:63:b8:ff:53:6c:52:66:6c:2f:f3:27:c8:56:89:e6:2c:89:
08:69:aa:1f:7c:fb:51:a3:97:74:e1:3a:62:a5:34:42:48:03:
e9:8a:14:7f:c2:76:c3:3d:8c:8b:4c:8d:4d:54:88:f9:36:f6:
c7:7a:47:57:72:f4:8d:84:6f:8d:c7:e3:1b:b5:3c:c1:fc:1a:
e0:5e:39:7f:47:78:f1:e9:35:a3:1b:4b:b7:be:6a:11:4f:d3:
8e:22:97:8c:25:2a:42:5a:0b:60:fa:36:49:fa:6c:38:33:b0:
44:46:46:5c:45:5d:e5:68:85:6d:8c:f9:b3:c1:4e:b1:5f:9a:
99:22:29:4b:f2:36:f7:cb:f4:26:35:71:95:60:58:ce:2b:fd:
73:e8:a3:06:64:a3:a9:0b:75:9b:46:12:ea:8b:87:ce:e6:eb:
66:ac:30:ab:08:3d:77:d8:e4:ea:1d:c6:02:92:81:81:39:89:
68:43:11:67:57:0b:a1:92:21:ea:44:96:4b:a4:a9:0b:db:2d:
c8:d8:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:34 2025 by rpki-client